Legal / the plain-language version
Privacy
Last updated 19 July 2026
Draft — pending legal review. This document is a good-faith description of how Contentum works today. It has not yet been reviewed by a lawyer and should not be relied on as legal advice.
What we store
Contentum holds three kinds of data, and no more than it needs of each.
- Your account. An email address, a name if you give one, and either a password hash or nothing at all if you only ever sign in with a magic link.
- Your content. The programmes, courses, modules and lessons you write — their titles, their structure, and their Markdown bodies.
- Public-site analytics. Aggregated, cookie-free visit information such as the page viewed and broad browser, device and referrer details. Search parameters and URL fragments are excluded.
We do not use advertising or cross-site trackers, we do not sell data, and we do not read your content except where strictly necessary to operate or debug the service at your request.
How public-site analytics work
We use a self-hosted Umami installation on the public marketing pages to understand which pages and calls to action are useful. It does not run inside the signed-in authoring app, does not set cookies, and does not collect email addresses, form values or programme content. The tracker honours your browser’s Do Not Track setting.
Why we store it
To provide the service you signed up for. Your email is used to authenticate you (including sending magic-link sign-in emails) and to contact you about the service itself.
Who else sees it
A small number of processors, each doing one job: our hosting provider (servers and database, in the EU) and our email provider (delivering sign-in emails). Public-site analytics are hosted on our own infrastructure. Content you write is not shared with anyone else.
Deletion and retention
Deleting a programme or an item moves it to a recoverable state for 30 days, after which it is permanently removed. Backups are retained for 30 days and then rotated out. Ask us to delete your account and we will remove it and its content.
Getting your data out
Every programme can be exported at any time as a single JSON file containing its full structure and all of its Markdown — no request required, and no lock-in.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to privacy@contentum.app and we will respond within 30 days.
Contact
Privacy and legal matters: privacy@contentum.app. Anything else: hello@contentum.app.